Terms of Service · Privacy Policy · Refund Policy · Contact
Last updated: 25 August 2026.
KindleHub Pro ("KindleHub", "the service") is a web application for e-readers and
other browsers, at kindlehub.pro. It provides reading tools, notes,
games, chat, an app store for user-made mini-apps, and optional AI features.
Most of it is free. Some features require a paid plan.
An account is a username and a password you choose. The password is never sent to us: your browser derives a key from it, and that key is what identifies your account and what encrypts your data. This has one consequence you need to understand before you rely on it:
If you lose your password and your recovery code, your data cannot be recovered — by you or by us. We do not hold a copy of your key. This is not a policy we can make an exception to; it is a property of how the encryption works. Save your recovery code somewhere safe, and consider adding a recovery email in Settings.
You are responsible for what happens under your account. Do not share your password. One person, one account — do not register a username impersonating somebody else, and do not register on behalf of someone who has been removed from the service.
KindleHub has public spaces — chat rooms, topics, published apps, leaderboards, profiles. In them, do not:
Content posted to public spaces may be reviewed automatically or by a moderator, and may be removed. Accounts that break these rules may be warned, suspended, or removed. Where a ban is issued by a moderator rather than an administrator, it is reviewed before it takes effect.
Anyone can publish a mini-app. Published apps are reviewed automatically before they appear, and they run in a sandbox that blocks network access and prevents them from reading your KindleHub data. That reduces the risk; it does not make an app trustworthy. Apps are written by other users, not by us, and we do not endorse them. You install and run them at your own risk.
If you publish an app, you keep ownership of it, and you grant us permission to store, display and distribute it within KindleHub so that other users can install it. Do not publish code you do not have the right to publish.
Your notes, books, journals, flashcards, drawings and private messages remain yours. We claim no ownership of them. Because they are encrypted with your key, we could not read them even if we wanted to.
Content you deliberately make public — a published app, a chat message, a profile, a leaderboard entry — is visible to other users, and you grant us permission to store and display it for that purpose.
Paid plans are described on the Plans page in the app, including their price and what they include. Payments are handled by Stripe; we never see or store your card details. Subscriptions renew automatically at the interval shown at checkout, until cancelled. One-off purchases do not renew.
We may change plan prices or contents. If we change the price of a subscription you already hold, we will tell you before it applies to you, and you may cancel before the change takes effect. Existing one-off purchases are not affected by later price changes.
Storage limits, AI message allowances and similar quotas are part of the plan and are enforced by the service. Going over a limit does not delete anything — it prompts you to free space.
KindleHub is provided as-is. We aim to keep it running and to keep your synced data safe, but we do not promise uninterrupted availability, and we do not promise that any particular third-party feature (weather, news, book search, AI, maps) will keep working — those depend on services we do not control.
Keep your own copies of anything you cannot afford to lose. The app has an export function; use it.
You can stop using KindleHub at any time. You can delete your account's data from within the app. Deleting your local data does not automatically cancel a paid subscription — cancel that from the billing portal (see Refunds below).
We may suspend or end access for an account that breaks section 3. Where we do, and you have paid for a period you can no longer use, section 11 applies.
Nothing here limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited.
Subject to that: KindleHub is not liable for indirect or consequential loss, or for loss of data you did not keep a copy of. Where we are liable, our total liability is limited to the amount you paid us in the twelve months before the claim.
If you use KindleHub as a consumer, you have statutory rights that these terms do not affect.
We may update these terms. The "last updated" date at the top changes when we do. Continuing to use the service after a change means accepting it; if you do not accept it, stop using the service and, if you hold a paid plan, contact us about the unused part of it.
These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction. If you are a consumer resident elsewhere, this does not deprive you of the protection of the mandatory consumer law of where you live.
Modification and redistribution of this software is permitted, including commercial sale of modified versions, provided the attribution “Made by Aran” remains intact and visible in the footer. © Aran.
This is the same permission the app's footer used to carry in full. The attribution itself still sits in the footer of every page; only the wording of the permission moved here, where there is room for it.
This describes what KindleHub actually stores and sends, rather than what a generic privacy policy would say. Where something is unusual, it says why.
The bulk of what you keep in KindleHub — notes, books and reading positions, journals, flashcards, calendar entries, drawings, saved settings — is encrypted in your browser before it is uploaded, with a key derived from your password. We store the encrypted blob. We cannot read it, and we cannot recover it for you if you lose your password and recovery code.
Private messages and mail are encrypted the same way. Chat room messages are encrypted with a key derived from the room code.
We never receive your password. We never receive your username in plain form — what reaches the server is a hash of it.
| Data | Why | How long |
|---|---|---|
| Your encrypted account blob | So your data follows you across devices | Until you delete it |
| Account key hash | To find your row; it is not reversible to a username or password | Until you delete the account |
| Display name, avatar, optional profile (pronouns, hobbies, short bio) | So other users can tell each other apart in chat. You choose what is in it, and it publishes nothing if left empty | Until changed or removed |
| Presence (last seen time) | To show who is online | Rolling; old rows expire |
| Encrypted chat and mail | To deliver messages | Capped per room; older messages are deleted, not hidden |
| A coarse location label on chat messages (city / region / country) | Abuse investigation. Derived by our server from the connection, not from your device's GPS | With the message |
One visit row per browser per day: the random kh_device_id, the date, a rough device hint, and the country and city your connection appeared to come from | To know how many people use the service and on what | Kept. Not pruned on a schedule today, so treat it as indefinite. “Forget this device” ends the link between the old rows and this browser but does not delete the rows already written |
| Error reports | To fix crashes. Automatic reports carry the error and where it happened | Capped; oldest are dropped |
| Feedback and reports you submit | To act on them | Resolved items are deleted after 7 days |
| Recovery email, if you add one | Only to send you a password-reset code or your recovery code | Until you remove it |
| Plan / entitlement record | To know what you have paid for | While the plan is active, plus billing records |
| Gallery photos and video clips, if you turn syncing on | So the pictures you keep reach your other devices. They are encrypted in your browser before they are uploaded, under a key that is not your password, so a password change does not lose them. We cannot open them | Until you delete them; a delete removes them from the store too |
| A moderator application, if you send one | So the owner can decide. It carries the answers you typed and your account name | Until it is approved or declined |
Two things that are not in that table, because they never leave your device: what the Lie detector game measures (how long you hold each button and how you move while answering) is used to draw that one result screen and is not stored or sent anywhere; and the typing-rhythm profile behind the optional identity check is kept on the device that made it and is deliberately excluded from account sync.
On Cloudflare (Workers, D1 and R2). Data may be processed in any region Cloudflare operates in.
Payments go through Stripe. Stripe receives your payment details directly; we never see or store a card number. We receive from Stripe only what we need to know which plan is active and until when. Stripe's own privacy policy governs what they do with your payment data.
If you use an AI feature, the text of your prompt (and any context the feature attaches, such as the note you asked it to summarise) is sent to the AI provider to answer it. Which provider depends on your setting:
Do not put anything into an AI feature that you would not want the provider to receive. That is true of every AI feature anywhere, including this one.
Two places send text to an AI without you asking for it, and both are here because that is exactly the sort of thing a privacy policy should say plainly rather than bury:
The check runs in the reader's own browser and goes to Google Gemma through our shared key. If it flags something, a report is filed for a person to look at; nothing is banned or deleted by the AI on its own. You can turn this off in the moderator tools if you are an administrator; ordinary readers cannot turn off moderation of a public room, which is the point of it.
Several features fetch content from third parties. When they do, your device connects to them directly and they see your IP address the way any website you visit would. These include: Project Gutenberg and Gutendex (free books), Wikipedia and Wikimedia Commons (articles, and the image search), ESPN (sports scores), TheMealDB (recipes), RSS conversion and CORS-proxy services (news and calendar subscriptions), map and routing services (maps), weather services, OpenRouter (only to read its public list of available AI models, and only if you use OpenRouter), and Spotify (only if you connect it).
Two of these deserve a specific warning. News article fetching and iCal calendar subscriptions route the address you gave through a public proxy service, because those sources do not allow a browser to read them directly. If you subscribe to a private calendar link, treat that link as shared with the proxy operator. Use a calendar link you are happy for a third party to see, or do not use that feature.
QR codes are generated on your device and are not sent anywhere.
KindleHub sets one cookie. It is called
kh_device_id, it holds a random identifier for this browser and
nothing else, and it lasts about thirteen months. The same value is also kept in your
browser's local storage, so clearing one of them alone does not end it.
It does two things: it counts how many people use KindleHub, and it is how we can tell you that your account has been used on a device it has not been used on before. The identifier is random and is not derived from anything about your device, so a browser that has been cleared is a browser we have not seen before. It goes to our own server with the visit count, never to anyone else.
There are no advertising cookies, no third-party analytics and no tracking scripts. Your settings and your encrypted data live in local storage, which is not a cookie and is not sent anywhere automatically.
To end it: Settings → Account → This device → Forget this device, which gives this browser a new identifier and drops the old one. Clearing your browser's site data does the same thing. Neither signs you out or changes anything about your account.
KindleHub is intended for general audiences and is used by young readers. We do not require a date of birth and we do not knowingly build profiles of children. Public spaces are moderated as all-ages. If you believe a child's personal information has been posted publicly, contact us and we will remove it.
You can export your data from within the app, and delete it from within the app. Because the data we hold is encrypted with your key, an export from your own device is a more complete copy than anything we could produce.
If you are in the UK or EU, you have rights of access, correction, erasure, restriction, portability and objection under data protection law, and the right to complain to your supervisory authority (in the UK, the Information Commissioner's Office). To exercise any of them, contact us.
We do not sell personal data and we do not share it for advertising. We share data only with the processors named above (Cloudflare, Stripe, the AI provider you selected, and our email sender), and where we are legally required to.
You can cancel a subscription at any time. Cancelling stops the next renewal; your plan keeps working until the end of the period you have already paid for. There is no cancellation fee and no minimum term.
If you are a consumer in the UK or EU, you normally have 14 days from purchase to change your mind about digital content and get a refund. Because KindleHub unlocks your plan immediately at checkout, you are asked to agree to immediate supply — which means that right ends once you have started using the paid features.
In practice we do not stand on that. If you bought within the last 14 days and have barely used the plan, ask and we will refund it.
We will refund, in full or in part, where:
We generally do not refund a period you have used and that worked, or an account removed for breaking section 3 of the Terms. Outside those cases, ask — a person reads it.
A one-off purchase does not renew and does not need cancelling. The 14-day paragraph above applies to it in the same way.
Email the address below from the address you used at checkout, or from your recovery email, with your KindleHub username and roughly when you paid. We aim to reply within a few days. Refunds go back to the original payment method through Stripe, and usually take 5–10 days to appear.
None of this affects your statutory rights.
KindleHub Pro is a small, independently run service.